Provides guidance on managing the risks that may arise from outsourced relationships, including responsibilities, risk assessment, due diligence, contracts, security and confidentiality, controls, business resumption, and monitoring.
Includes a policy statement which is suitable for public documents; policy application; roles and responsibilities; complaint process for improving accessibility and accommodations; and contact for inquiries, questions, assistance, and general information.